Methods Inf Med 2001; 40(03): 221-224
DOI: 10.1055/s-0038-1634156
Original Article
Schattauer GmbH

Attitudes towards Information System Security among Physicians in Croatia

M. Markota
1   Institute of Public Health of the Republic of Slovenia, Croatia
,
J. Kern
2   Andrija Stampar School of Public Health, Medical School University of Zagreb, Croatia
,
I. Švab
1   Institute of Public Health of the Republic of Slovenia, Croatia
› Author Affiliations
Further Information

Publication History

Publication Date:
07 February 2018 (online)

Abstract:

To examine attitudes about information system security among Croatian physicians a cross-sectional study was performed on a representative sample of 800 Croatian physicians. An anonymous questionnaire comprising 21 questions was distributed and statistical analysis was performed using a chi-square test. A 76.2% response rate was obtained. The majority of respondents (85.8%) believe that information system security is a new area in their work. In general, physicians are not informed about European directives, conventions, recommendations, etc. Only a small number of physicians use personal computers at work (29%). Those physicians who have a personal computer use it mainly for administrative reasons. Most health-care institutions (89%) do not have a security manual and the area of information system security is left to individual interest and initiative. Only 25% of physicians who have a personal computer use any type of password. A high percentage of physicians (22%) has never thought about the problem of personal data being used by organizations (e.g. police, banks) without legal background; a small, but still significant percentage of physicians (5.6%) has even agreed with such use. Results indicate that for the vast majority of physicians, information system security is a new area in their daily work, one which is left to individual interest and initiative. They are not familiar with the ethical, technical and legal backgrounds which have been defined for that area within the Council of Europe and the European Union. New aspects: This is the first study performed in Central and Eastern Europe dealing with information system security, performed on a representative nationwide sample of all the physicians.

 
  • REFERENCES

  • 1 Convention No. 108 for the protection of individuals with automatic processing of personal data. Strasbourg: Council of Europe; 1981
  • 2 Griesser G. et al. Data Protection in Health Information Systems: Where do we stand?. IMIA WG4 by North Holland, Amsterdam: 1983
  • 3 European Union Directive 95/46/EC.. On the Protection of Individuals with Regard to the Processing of Personal Data and on Free Movement of such Data. OJ L281/31 – 50, Brussels: 1995
  • 4 Recommendation on the Protection of Medical Data R(96). Strasbourg: Committee of of the Council of Europe; 1996
  • 5 Katsikas SK, Grutzalis DA. A High Level Security Policy (HLSP) for Health Care Establishments. AIM/SISMED (A2033) Project. Commission of the European Communities; 1993: 1-41.
  • 6 ISHTAR Project, Implementing Secure Healthcare Telematics Applications in Europe. EU Fourth Framework, HT1028, 1996- 1999
  • 7 Furnell SM, Gaunt PN, Holben RF, Sanders PW, Stockel CT, Warren MJ. Assessing staff attitudes towards information security in a European healthcare establishment. Med Inform 1996; 21: 105-12.
  • 8 Pas L, Azeredo Z, Gonzalez JA. et al. Determinants of preventive primary health care. In: Pas L. (ed). Proceedings of the WONCA satellite Conference. The Hague; 1993: 147-9.
  • 9 Boerma WGW, Fleming DM. The role of general practice in primary health care. World Health Organization; 1998: 51-82.